Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File: 3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier: js9Tq1FYA8hvBTeG+O1rxGP24vo33gz2Q0F8Sl7CqII=
Subject key identifier: 79:44:DF:81:A6:99:AC:4F:94:EA:2D:A1:4A:21:2C:4C:91:65:FD:85
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer: /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial: 019D235E05A70541926EA80B8F3496401E2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number: 11E2
Signing time: Wed 25 Mar 2026 05:00:57 +0000
Manifest this update: Wed 25 Mar 2026 05:00:57 +0000
Manifest next update: Thu 26 Mar 2026 05:00:57 +0000
Files and hashes: 1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: ws1uNS0xiSxUkQOerOnw0qIkgRUWWXQpkMLu+fn709c=)
2: 7OkmnPh3ynYj5y3_NgmBm3m_TO4.roa (hash: 76UePjEP+wElQI63EJrAUQNqnmL6+mG0ZmW2QHArepk=)
3: ICKtn9FiA8o1E110emXc1Z_9SHM.roa (hash: VFWWvtCtDRylV3Kwhn/OLe+sEMZLlpEgPe5DOIGJ9cA=)
4: bRiAj1-hf7sNdEiD1YkRkRllIpg.roa (hash: QwlE0RKPjkh4vpQe1ZoXKOsV7QKRd+qV+VA/PdPxz0M=)
5: iXgvCFVYLYuWNg_lY55_1JUdv1Y.roa (hash: sekPzygHUOkEd1ly9r7LBo/JOh0iiRtcIXhoK8Xl8WU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:5e:05:a7:05:41:92:6e:a8:0b:8f:34:96:40:1e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Validity
Not Before: Mar 25 05:00:57 2026 GMT
Not After : Mar 26 05:00:57 2026 GMT
Subject: CN=7944df81a699ac4f94ea2da14a212c4c9165fd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ec:8b:c2:50:38:18:58:1b:fe:ab:35:ad:df:
01:8c:96:60:f3:bd:9d:2b:90:2a:84:68:1f:1a:78:
8e:8d:dd:32:0b:69:58:5a:6a:6f:ba:98:ef:43:ed:
ff:3e:ff:ab:db:c8:ae:f5:60:1d:4e:75:92:dd:21:
5a:61:f9:de:ec:7f:1b:b4:f6:2b:89:6a:09:f4:3c:
63:4a:81:6f:94:e5:71:14:ec:52:fa:6e:cd:b7:11:
b6:80:a6:86:e8:b6:ce:f0:6d:76:c5:3a:25:6c:e6:
a4:be:02:d1:ca:09:a2:ef:b9:f0:28:b3:32:19:08:
3d:0e:f8:86:84:62:c3:2f:7f:5b:72:6c:1c:c5:69:
de:7a:b4:0a:b8:25:16:39:c6:08:07:2a:b7:f4:7e:
63:10:0a:50:65:51:fe:fb:e4:7f:f4:d5:51:68:b6:
55:f0:54:52:ad:f3:16:25:1a:fc:5b:9d:ea:a3:ef:
6a:9b:e0:e7:e3:f1:20:06:5f:0e:03:8e:12:ce:35:
d5:1d:ac:93:46:13:c0:fa:8e:94:79:90:c7:b5:8e:
44:99:bf:2e:1d:e4:ac:34:ad:97:73:0d:4c:5a:6d:
4a:ba:5f:9f:02:c5:dd:c2:34:1b:03:44:19:e3:bf:
38:c2:7e:b9:29:22:22:eb:e7:cb:f7:01:fe:ba:bb:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:44:DF:81:A6:99:AC:4F:94:EA:2D:A1:4A:21:2C:4C:91:65:FD:85
X509v3 Authority Key Identifier:
keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:cf:7a:3d:93:fa:a1:2e:b0:45:df:6f:cc:eb:0e:0d:ac:80:
97:32:0a:c9:c2:18:9d:2e:7b:5e:5d:75:25:11:13:e5:3d:54:
27:54:56:29:b8:51:e8:fb:17:f0:1b:90:33:8c:e5:2a:46:d6:
59:e0:cb:74:6b:43:18:f0:b6:0c:54:8b:ee:5e:c2:cc:03:8d:
bc:a5:48:13:49:8b:08:96:9b:20:56:f2:87:96:35:3b:24:0a:
94:05:13:f1:8f:31:fd:70:0e:96:cb:df:2e:87:c5:9b:ad:e1:
74:d5:2c:73:c7:f9:17:0d:28:ce:f2:cd:26:ec:6e:13:49:84:
c7:be:6a:e9:95:8c:ca:86:cb:09:bd:8b:40:82:e8:82:67:02:
94:c5:5a:96:ac:c5:ab:d1:6b:23:e8:5b:17:e1:72:5e:44:2d:
92:cb:68:7c:da:fb:c6:87:3b:9e:d8:b5:70:8c:50:48:cd:d6:
c6:4e:f5:55:85:78:f9:8e:de:c9:5f:af:75:a8:30:f2:45:26:
32:d3:3a:37:c1:f2:93:f0:20:50:38:50:54:b3:26:34:81:a8:
db:38:3a:f7:cd:27:e1:82:b6:76:b0:37:3f:cb:59:b8:01:fe:
c3:a1:d8:eb:ea:80:63:c4:0d:27:30:ff:b2:77:6c:67:ce:d4:
94:21:4d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 14:17:42 2026 by rpki-client